New! Use the 1Password Credential Broker to give CI/CD and other machine workflows short-lived access to secrets, without managing service account tokens.
using RestSharp;
var options = new RestClientOptions("https://events.1password.com/api/v3/auditevents");
var client = new RestClient(options);
var request = new RestRequest("");
request.AddHeader("Authorization", "Bearer <token>");
var response = await client.GetAsync(request);
Console.WriteLine("{0}", response.Content);
using RestSharp;
var options = new RestClientOptions("https://events.1password.com/api/v3/auditevents");
var client = new RestClient(options);
var request = new RestRequest("");
request.AddHeader("Authorization", "Bearer <token>");
var response = await client.GetAsync(request);
Console.WriteLine("{0}", response.Content);
{
"type": "unauthenticated",
"message": "An error occurred while processing the request."
}
{
"type": "unauthenticated",
"message": "An error occurred while processing the request."
}
{
"type": "unauthenticated",
"message": "An error occurred while processing the request."
}
{
"type": "unauthenticated",
"message": "An error occurred while processing the request."
}
{
"type": "unauthenticated",
"message": "An error occurred while processing the request."
}
Retrieve event data from your 1Password account to determine who performed an action and when, like when a team member edits an item’s password or invites another team member to a shared vault.Use the start_time and end_time parameters to filter events by the time they were ingested by 1Password (insert_time), not the time they occurred (create_time). To continue polling for new events, start a new request using the insert_time of the last event as the value for start_time. Learn more about continuous polling in the beta API.Use max_page_size to set the number of events returned per page (100 by default, up to 1000). If more results are available, the response includes a next_page_token at the top level. Pass it in the page_token query parameter to fetch the next page.
Don’t use the start_time or end_time query parameters in a request that also uses the page_token query parameter. Doing so will result in a 400 bad request error.
If the response is successful but there aren’t any events for the parameters you requested, the audit_events array is empty ([]).This endpoint is rate limited. Requests that exceed the limit return a 429 Too Many Requests error and include a Retry-After header. Learn more about rate limits.See the API conventions for more information about authentication, pagination, filtering, and error handling.
Bearer authentication using a JWT issued for a service account. Use the bearer token from your Events Reporting integration, scoped to access audit events.
The maximum number of events to return per page, from 0 to 1000. If you omit this parameter or set it to 0, the server default of 100 is used. The endpoint accepts any positive value, but returns no more than 1000 events per page.
An opaque cursor token that identifies the next page of results to retrieve. Use the next_page_token value from the previous response. Don't use the start_time or end_time parameters with page_token: doing so returns a 400 bad request error.
The lower bound insertion time for which to retrieve results, filtering on when events were ingested, not when they occurred. This bound is exclusive: only events whose insertion time is strictly greater than start_time are returned. Invalid if page_token is specified. Uses the RFC 3339 standard.
The upper bound insertion time for which to retrieve results, filtering on when events were ingested, not when they occurred. This bound is exclusive: only events whose insertion time is strictly less than end_time are returned. Invalid if page_token is specified. Uses the RFC 3339 standard.
Response
A subset of the audit events that match the request, with a token to fetch the next page of results if more are available. If no events match, the audit_events array is empty.
An opaque token used to retrieve the next page of results. Pass it as the page_token query parameter on the next request. Present only when additional results are available; if it's absent, there are no more pages.
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"1Password Developer","description":"Developer docs for 1Password. Keep secrets out of your code with the CLI, SSH agent, Environments, service accounts, SDKs, and tools for AI agents.","colors":{"primary":"#145FE4","light":"#b8d7ff","dark":"#303136"},"logo":{"light":"https://mintcdn.com/ab-634991b8/tWWm5UFlpZQ9nof8/images/logo-1password-dark.svg?fit=max\u0026auto=format\u0026n=tWWm5UFlpZQ9nof8\u0026q=85\u0026s=2c2acc6dc5f817defe70ebdef67c9b11","dark":"https://mintcdn.com/ab-634991b8/tWWm5UFlpZQ9nof8/images/logo-1password-light.svg?fit=max\u0026auto=format\u0026n=tWWm5UFlpZQ9nof8\u0026q=85\u0026s=0dae06f9dd5b1f569de5cb9fba337405"},"favicon":"https://mintcdn.com/ab-634991b8/s4Wjy03jBRs6hcHb/favicon.ico?fit=max\u0026auto=format\u0026n=s4Wjy03jBRs6hcHb\u0026q=85\u0026s=dd03b4bc604b342373aa4d3e21be4310","api":{"playground":{"display":"interactive"},"examples":{"languages":["curl","node","python","go","dotnet","java","php","powershell","ruby"]}},"background":{"color":{"light":"#ffffff","dark":"#1a1b1e"}},"navbar":{"links":[{"icon":"github","href":"https://github.com/1Password","label":"GitHub"},{"icon":"slack","href":"https://www.1password.dev/joinslack","label":"Join Slack"}],"primary":{"type":"button","label":"Try free","href":"https://1password.com/pricing/business"}},"footer":{"socials":{"github":"https://github.com/1Password","x":"https://x.com/1PasswordDev","reddit":"https://www.reddit.com/r/1Password","linkedin":"https://www.linkedin.com/company/1password","youtube":"https://www.youtube.com/1PasswordVideos","facebook":"https://www.facebook.com/1Password","instagram":"https://www.instagram.com/1password"},"links":[{"header":"Get started","items":[{"label":"Developer quickstart","href":"/get-started/developer-quickstart"},{"label":"Admin quickstart","href":"/get-started/administrator-quickstart"},{"label":"Partner quickstart","href":"/get-started/partner-quickstart"},{"label":"All setup guides","href":"/get-started"}]},{"header":"Help and resources","items":[{"label":"CLI troubleshooting","href":"/cli/app-integration"},{"label":"SSH troubleshooting","href":"/ssh/agent/troubleshooting"},{"label":"System status","href":"https://status.1password.com"},{"label":"CLI release notes","href":"/cli/release-notes"},{"label":"1Password University","href":"https://www.1password.university/?utm_ref=website-footer"},{"label":"Blog","href":"https://blog.1password.com"}]},{"header":"Community","items":[{"label":"Developer community","href":"/community"},{"label":"Events","href":"https://luma.com/1password"},{"label":"Developer Slack","href":"/joinslack"},{"label":"Newsletter","href":"https://1password.com/developer-newsletter"},{"label":"Code of Conduct","href":"/code-of-conduct"},{"label":"Projects disclaimer","href":"/community/disclaimer"}]},{"header":"Legal","items":[{"label":"Terms of Service","href":"https://1password.com/legal/terms-of-service"},{"label":"Privacy Policy","href":"https://1password.com/legal/privacy"},{"label":"Cookie Policy","href":"https://1password.com/legal/cookies"},{"label":"Accessibility","href":"https://1password.com/legal/accessibility"}]}]},"seo":{"metatags":{"canonical":"https://www.1password.dev","google-site-verification":"YserOhXnJUjFfIZ4K3qgxkVSlQZQdXtIbBiKzZ35Nvs"}},"fonts":{"heading":{"family":"Public Sans"},"body":{"family":"Public Sans"}},"banner":{"content":"**New!** Use the [1Password Credential Broker](https://www.1password.dev/brokered-access) to give CI/CD and other machine workflows short-lived access to secrets, without managing service account tokens.","dismissible":true,"color":{"light":"#145fe4","dark":"#145fe4"}},"errors":{"404":{"redirect":false,"title":"This page can't be found","description":"Our docs have moved to [www.1password.dev](https://www.1password.dev). Try searching for what you need or selecting from the list of tools."}},"contextual":{"options":["copy","view","mcp","cursor","vscode","chatgpt","claude","perplexity"],"display":"header"},"styling":{"latex":false},"navigation":{"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"ab-634991b8","hasAudioNarration":false,"actualSubdomain":"ab-634991b8","customDomains":["www.1password.dev"],"gitSource":{"type":"github","owner":"1password","repo":"1password.dev","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"feedback":{"thumbs":true,"contextualFeedback":{"allowEmail":false},"agentFeedback":true},"entitlements":{"AI_CHAT":{"status":"ENABLED"},"REMOVE_BRANDING":{"status":"ENABLED"},"CONTEXTUAL_FEEDBACK":{"status":"ENABLED"},"CODE_SNIPPET_FEEDBACK":{"status":"ENABLED"},"WEB_MCP":{"status":"ENABLED"},"NARRATION":{"status":"ENABLED"}},"buildId":"6af4cc23835e7d1bb15472d7","clientVersion":"0.0.4124","searchFilterCounts":[{"language":"default","tag":"CLI","count":320},{"language":"default","tag":"SDKs \u0026 APIs","count":120},{"language":"default","tag":"Shell Plugins","count":104},{"language":"default","tag":"Plugins","count":97},{"language":"default","tag":"CI/CD \u0026 infrastructure","count":92},{"language":"default","tag":"SaaS Manager API","count":88},{"language":"default","tag":"API Reference","count":64},{"language":"default","tag":"Reference","count":56},{"language":"default","tag":"SDKs","count":51},{"language":"default","tag":"Events API","count":44}]},"assistantConfig":{"enableStarterQuestions":true,"enableContextualStarterQuestions":true,"deflection":{"enabled":true,"email":"support@1password.com","showHelpButton":true}},"basePath":"","hasChatPermissions":true,"hasWebMcpPermissions":true,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-rbac-roles","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-metadata","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-serve","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"live-agents","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":true},"customCss":[{"filePath":"styles.css","content":":root{--op-secure-blue: #104ebb;--op-secure-blue-hover: #0e46a8;--op-iron-ore: #303136;--op-page-bg-dark: #1a1b1e;--op-white: #ffffff;--op-icy-blue: #dcebff;--op-cornflower: #b8d7ff;--op-biscuit: #fbf8f4;--op-sunbeam: #fad785;--op-tangerine: #ff8f78;--op-enable-mint: #76e0bd;--op-gold: #cbb88e;--op-status-success: #10622f;--op-status-warning: #8a4006;--op-status-error: #a71c1c;--op-status-info: var(--op-secure-blue);--op-border-ui: #949494;--op-border-ui-dark: #6b7280;--op-border-subtle: rgb(3 7 18 / 0.12);--op-border-subtle-dark: rgb(251 248 244 / 0.25);--op-border-footer-dark: rgb(251 248 244 / 0.37);--op-border-navbar-light: rgb(107 114 128 / 0.05);--op-border-navbar-dark: rgb(209 213 219 / 0.06);--op-border-card-light: rgb(3 7 18 / 0.1);--op-border-card-dark: rgb(255 255 255 / 0.1);--op-border-hero-light: rgb(255 255 255 / 0.08);--op-border-hero-dark: rgb(255 255 255 / 0.12);--op-border-badge-light: rgb(16 78 187 / 0.2);--op-border-badge-dark: rgb(184 215 255 / 0.25);--op-border-workflow-dark: rgb(251 248 244 / 0.2);--op-text-body: var(--op-iron-ore);--op-text-body-dark: var(--op-biscuit);--op-surface-card-light: var(--op-white);--op-surface-card-dark: #25262a;--op-surface-callout-light: rgb(220 235 255 / 0.45);--op-surface-callout-dark: rgb(184 215 255 / 0.08)}#content.prose{--tw-prose-body: var(--op-text-body)}.dark #content.prose{--tw-prose-body: var(--op-text-body-dark)}#content.prose :where(p,span[data-as=\"p\"],li,td,th,blockquote,figcaption):not(a.op-cta-primary span){color:var(--op-text-body)}.dark #content.prose :where(p,span[data-as=\"p\"],li,td,th,blockquote,figcaption):not(a.op-cta-primary span){color:var(--op-text-body-dark)}#content :is(p,li,div,span,button,h1,h2,h3,h4,h5,h6).text-gray-600,#content :is(p,li,div,span,button,h1,h2,h3,h4,h5,h6).text-gray-700,#content :is(p,li,span,button,h1,h2,h3,h4,h5,h6).text-gray-500{color:var(--op-text-body)}.dark #content :is(p,li,div,span,button,h1,h2,h3,h4,h5,h6).dark\\:text-gray-400,.dark #content :is(p,li,div,span,button,h1,h2,h3,h4,h5,h6).dark\\:text-gray-300,.dark #content :is(p,li,span,button,h1,h2,h3,h4,h5,h6).dark\\:text-gray-500{color:var(--op-text-body-dark)}#content .text-gray-400:not(:is(p,li,span,button,h1,h2,h3,h4,h5,h6)){color:var(--op-border-ui)}.dark #content .text-gray-400:not(:is(p,li,span,button,h1,h2,h3,h4,h5,h6)),.dark #content .text-gray-500:not(:is(p,li,span,button,h1,h2,h3,h4,h5,h6)){color:var(--op-border-ui-dark)}.dark .card-group{--background-dark: 37 38 42}.dark .card-group .card{background-color:rgb(var(--background-dark))!important}.card-group .card{border-color:var(--op-border-card-light)!important}.dark .card-group .card{border-color:var(--op-border-card-dark)!important}.op-card-surface{border:1px solid var(--op-border-card-light)}.dark .op-card-surface{border-color:var(--op-border-card-dark)}#content .hover\\:border-gray-300:hover{border-color:var(--op-iron-ore)}.dark #content .hover\\:border-gray-600:hover{border-color:var(--op-biscuit)}.community-card{border:1px solid var(--op-border-card-light);border-radius:0.5rem;background-color:var(--op-surface-card-light)}.dark .community-card{border-color:var(--op-border-card-dark);background-color:var(--op-surface-card-dark)}.community-card .community-card-chevron{color:var(--op-border-ui)}.dark .community-card .community-card-chevron{color:var(--op-cornflower)}a.community-card:hover{border-color:var(--op-secure-blue)}.dark a.community-card:hover{border-color:var(--op-cornflower)}.community-callout{border:1px solid var(--op-border-card-light);border-radius:0.5rem;background-color:var(--op-surface-callout-light)}.dark .community-callout{border-color:var(--op-border-card-dark);background-color:var(--op-surface-callout-dark)}.community-link{color:var(--op-secure-blue);text-decoration:none}.community-link:hover{color:var(--op-secure-blue-hover);text-decoration:underline}.dark .community-link{color:var(--op-cornflower)}.dark .community-link:hover{color:var(--op-white)}:is(#sidebar-content a:not([aria-current=\"page\"]),#table-of-contents,#table-of-contents a,#navbar .nav-tabs-item:not([data-active]),#navbar nav ul>li:not(#topbar-cta-button)>a,#search-bar-entry,#search-bar-entry-mobile,#assistant-entry,#assistant-entry-mobile,[data-component-name=\"theme-toggle\"]){color:var(--op-text-body)}.dark :is(#sidebar-content a:not([aria-current=\"page\"]),#table-of-contents,#table-of-contents a,#navbar .nav-tabs-item:not([data-active]),#navbar nav ul>li:not(#topbar-cta-button)>a,#search-bar-entry,#search-bar-entry-mobile,#assistant-entry,#assistant-entry-mobile,[data-component-name=\"theme-toggle\"]){color:var(--op-text-body-dark)}:is(#search-bar-entry,#search-bar-entry-mobile,#assistant-entry,#assistant-entry-mobile,[data-component-name=\"theme-toggle\"]) svg{color:inherit}#footer a.h-fit svg{background-color:var(--op-biscuit)}#footer a.h-fit:hover svg{background-color:var(--op-white)}.hero-background{background-color:var(--op-iron-ore);background-image:radial-gradient(\n ellipse 75% 100% at 100% 50%,\n rgb(20 95 228 / 0.55) 0%,\n rgb(20 95 228 / 0.2) 40%,\n transparent 70%\n )}.dark .hero-background{background-color:var(--op-page-bg-dark);background-image:radial-gradient(\n ellipse 80% 100% at 100% 50%,\n rgb(20 95 228 / 0.7) 0%,\n rgb(20 95 228 / 0.3) 45%,\n transparent 75%\n )}.hero-section{border-bottom:1px solid var(--op-border-hero-light)}.dark .hero-section{border-bottom-color:var(--op-border-hero-dark)}.hero-cta{background-color:var(--op-secure-blue);color:var(--op-white);box-shadow:0 1px 3px rgb(0 0 0 / 0.25)}.hero-cta svg,.hero-cta svg path{fill:currentColor!important;color:currentColor!important}.hero-cta:hover{background-color:var(--op-secure-blue-hover)}#content.prose a.op-cta-primary,#content a.op-cta-primary{background-color:var(--op-secure-blue);color:var(--op-white)!important;text-decoration:none}#content.prose a.op-cta-primary span[data-as=\"p\"],#content.prose a.op-cta-primary span,#content a.op-cta-primary span[data-as=\"p\"],#content a.op-cta-primary span{color:var(--op-white)!important}#content.prose a.op-cta-primary:hover,#content a.op-cta-primary:hover{background-color:var(--op-secure-blue-hover);color:var(--op-white)!important}#content.prose a.op-cta-primary:hover span[data-as=\"p\"],#content.prose a.op-cta-primary:hover span,#content a.op-cta-primary:hover span[data-as=\"p\"],#content a.op-cta-primary:hover span{color:var(--op-white)!important}#topbar-cta-button a>span.absolute{background-color:var(--op-secure-blue)!important}#topbar-cta-button a:hover>span.absolute{background-color:var(--op-secure-blue-hover)!important}#topbar-cta-button a span.z-10{color:var(--op-white)!important}#topbar-cta-button a svg{color:var(--op-white)!important}.card-group{gap:1rem}#content .card-group img[src*=\"/homepage-icons/brand/\"]{width:32px;height:32px;flex-shrink:0}.homepage-card-title{display:inline-flex;flex-wrap:wrap;align-items:center;gap:0.25rem 0.5rem}.image-button-link img{margin:10px 0}.dark #content a>div>span{color:var(--op-cornflower)!important}.docs-higlight-cards{display:grid;grid-template-columns:repeat(auto-fill, minmax(250px, 1fr));gap:1rem;margin-bottom:1rem}.highlight-card-link{color:var(--op-secure-blue)!important}.highlight-card-link:hover{color:var(--op-secure-blue-hover)!important}.dark .highlight-card-link{color:var(--op-cornflower)!important}.dark .highlight-card-link:hover{color:var(--op-white)!important}.highlight-card-link svg{background-color:var(--op-secure-blue)!important}.dark .highlight-card-link svg{background-color:var(--op-cornflower)!important}.coloredCodeWrapper .code-block>div:nth-child(3){--fade-color-light: transparent !important;--fade-color-dark: transparent !important}.badge{border-radius:0.4rem;color:var(--op-white);font-weight:700;line-height:1;padding:3px 5px}.badge--primary{background-color:var(--op-secure-blue)}.badge--secondary{background-color:var(--op-biscuit);color:var(--op-iron-ore)}.op-status-badge{display:inline-flex;flex-shrink:0;align-items:center;white-space:nowrap;vertical-align:middle;border:1px solid var(--op-border-badge-light);border-radius:0.25rem;background-color:var(--op-icy-blue);color:var(--op-iron-ore);padding:0.125rem 0.625rem;font-size:0.75rem;line-height:1rem;font-weight:600}.dark .op-status-badge{border-color:var(--op-border-badge-dark);background-color:rgb(184 215 255 / 0.12);color:var(--op-icy-blue)}.op-workflow-guide-badge{display:inline-flex;flex-shrink:0;align-items:center;white-space:nowrap;margin-top:0.75rem;border:1px solid transparent;border-radius:0.25rem;background-color:var(--op-biscuit);color:var(--op-iron-ore);padding:0.125rem 0.625rem;font-size:0.75rem;line-height:1rem;font-weight:600}.dark .op-workflow-guide-badge{border-color:var(--op-border-workflow-dark);background-color:rgb(251 248 244 / 0.1);color:var(--op-biscuit)}.op-beta-badge-inline{display:inline-flex;align-items:center;margin-left:0.5rem;vertical-align:middle}.mdx-content a[href^=\"http\"]:not([href*=\"://1password.com/\"],[href$=\"://1password.com\"],[href*=\".1password.com/\"],[href$=\".1password.com\"],[href*=\"://1password.dev/\"],[href$=\"://1password.dev\"],[href*=\".1password.dev/\"],[href$=\".1password.dev\"],[href*=\"://1password.ca/\"],[href$=\"://1password.ca\"],[href*=\".1password.ca/\"],[href$=\".1password.ca\"],[href*=\"://1password.eu/\"],[href$=\"://1password.eu\"],[href*=\".1password.eu/\"],[href$=\".1password.eu\"],[href*=\"://1password.io/\"],[href$=\"://1password.io\"],[href*=\".1password.io/\"],[href$=\".1password.io\"],[href*=\"://1password.university/\"],[href$=\"://1password.university\"],[href*=\".1password.university/\"],[href$=\".1password.university\"],[href*=\"://agilebits.com/\"],[href$=\"://agilebits.com\"],[href*=\".agilebits.com/\"],[href$=\".agilebits.com\"],[href*=\"://b5dev.com/\"],[href$=\"://b5dev.com\"],[href*=\".b5dev.com/\"],[href$=\".b5dev.com\"],[href*=\"://b5local.com/\"],[href$=\"://b5local.com\"],[href*=\".b5local.com/\"],[href$=\".b5local.com\"],[href*=\"://1infra.dev/\"],[href$=\"://1infra.dev\"],[href*=\".1infra.dev/\"],[href$=\".1infra.dev\"],[href*=\"://kolide.com/\"],[href$=\"://kolide.com\"],[href*=\".kolide.com/\"],[href$=\".kolide.com\"],[href*=\"://trelica.app/\"],[href$=\"://trelica.app\"],[href*=\".trelica.app/\"],[href$=\".trelica.app\"],[href*=\"://trelica.eu/\"],[href$=\"://trelica.eu\"],[href*=\".trelica.eu/\"],[href$=\".trelica.eu\"],[href*=\"://trelica.com/\"],[href$=\"://trelica.com\"],[href*=\".trelica.com/\"],[href$=\".trelica.com\"],[href*=\"://1password.community/\"],[href$=\"://1password.community\"],[href*=\".1password.community/\"],[href$=\".1password.community\"],[href*=\"://1pw.ca/\"],[href$=\"://1pw.ca\"],[href*=\".1pw.ca/\"],[href$=\".1pw.ca\"]):not(.card *,.op-card-surface *,.image-button-link,.community-card,.community-card *,pre *,:has(img))::after{content:\"\";display:inline-block;width:1em;height:1em;margin-left:0.25em;vertical-align:-0.125em;background-color:currentColor;-webkit-mask:var(--op-link-icon, url(\"/static/img/icons/external-link.svg\")) no-repeat center / contain;mask:var(--op-link-icon, url(\"/static/img/icons/external-link.svg\")) no-repeat center / contain}.mdx-content a:is([href*=\"://github.com/\"],[href$=\"://github.com\"],[href*=\".github.com/\"],[href$=\".github.com\"],[href*=\"://github.blog/\"],[href$=\"://github.blog\"]){--op-link-icon: url(\"/static/img/logos/github.svg\")}#content>h5,#content>h6{font-weight:700}.dark #content>h5,.dark #content>h6{color:var(--op-white)}.accordion{background-color:var(--op-icy-blue)}.dark .accordion{background-color:var(--op-surface-card-dark)}.accordion .mint-bg-white{padding:1rem}.accordion .mint-bg-white [class*=\"-mx-\"]{margin:0!important;padding:0!important;width:100%!important;--page-padding: 0px}#footer>div>div.flex.flex-col.md\\:flex-row.gap-8.justify-between.min-h-\\[76px\\]>div.flex.flex-col.sm\\:grid.max-md\\:\\!grid-cols-2.gap-8.flex-1>div>div>p{display:none!important}footer#footer.advanced-footer{display:flex!important}footer#footer{align-items:unset;background-color:var(--op-iron-ore);color:var(--op-white)}#footer img.nav-logo.dark\\:hidden{display:none!important}#footer img.nav-logo.dark\\:block{display:block!important}#footer p.font-semibold,#footer a{color:var(--op-white)}#footer>div.flex.w-full.flex-col.gap-12.justify-between.px-8.py-16.md\\:py-20.lg\\:py-28.z-20>div.h-\\[1px\\].w-full.bg-gray-100.dark\\:bg-white\\/5{background-color:var(--op-border-footer-dark)}#footer>div.flex.w-full.flex-col.gap-12.justify-between.px-8.py-16.md\\:py-20.lg\\:py-28.z-20{margin:0 auto}footer .email_form{max-width:650px;margin:auto}.codeblock_accordion{margin-top:10px}.codeblock_accordion .code-block{margin:0!important}.codeblock_accordion>div>.code-block,.codeblock_accordion>div>.code-block>div:nth-child(2){border-bottom-left-radius:0;border-bottom-right-radius:0}.codeblock_accordion .see_results_container{border-bottom-left-radius:1rem;border-bottom-right-radius:1rem}.codeblock_accordion .see_results_container .code-block,.codeblock_accordion .see_results_container .code-block>div:nth-child(2){border-top-left-radius:0;border-top-right-radius:0}.hide_bullets ul li{padding-left:0!important}.hide_bullets ul li::before{content:none!important}#navigation-items a[href^=\"/\"]:not([href^=\"//\"])>div>div:nth-child(2){display:none}a[href^=\"http\"] .flex-shrink-0 svg,a[href^=\"//\"] .flex-shrink-0 svg{display:block}h1 code,h2 code,h3 code,h4 code,h5 code,h6 code{white-space:nowrap}h2.flex.whitespace-pre-wrap span.cursor-pointer svg.icon,h4.flex.whitespace-pre-wrap span.cursor-pointer svg.icon{margin:0;vertical-align:baseline}table thead tr th code{padding-left:0!important;padding-right:0!important}.tabs.tab-container{padding:0 0.8rem 1rem;border:1px solid var(--op-border-subtle);border-radius:4px}.dark .tabs.tab-container{border-color:var(--op-border-subtle-dark)}nav-tabs-item:nth-child(3),.nav-tabs-item:nth-child(3){--tab-gap-before-divider: 8px;--nav-tabs-item-gap: 0.5rem;margin-left:var(--tab-gap-before-divider)!important;padding-left:calc(\n var(--tab-gap-before-divider) + var(--nav-tabs-item-gap)\n )!important;border-left:1px solid var(--op-border-navbar-light)}.dark nav-tabs-item:nth-child(3),.dark .nav-tabs-item:nth-child(3){border-left-color:var(--op-border-navbar-dark)}.peer.is-center~div:has(.tutorial-explorer){max-width:84rem!important}@media (max-width: 639px){.tutorial-filter-bar{display:grid!important;grid-template-columns:minmax(0, 1fr)}.tutorial-filter-search{grid-column:1 / -1;width:100%}.tutorial-filter-search input{width:100%!important}.tutorial-filter-topic,.tutorial-filter-tools{grid-column:1 / -1;width:100%}.tutorial-filter-dropdown>button,.tutorial-filter-menu{width:100%}.tutorial-filter-dropdown>button{justify-content:space-between}.tutorial-filter-menu{min-width:0!important}.tutorial-filter-sort{grid-column:1 / -1;justify-self:end;margin-left:0!important}}#navbar.is-custom .nav-tabs-item[data-active]{color:var(--op-text-body);text-shadow:none}.dark #navbar.is-custom .nav-tabs-item[data-active]{color:var(--op-text-body-dark)}#navbar.is-custom .nav-tabs-item[data-active]>div{background-color:transparent!important}#navbar.is-custom .nav-tabs-item[data-active]:hover>div{background-color:rgb(229 231 235)!important}.dark #navbar.is-custom .nav-tabs-item[data-active]:hover>div{background-color:rgb(55 65 81)!important}#footer .api-sdk-terms-notice{margin:0;padding:0 0 1.25rem;font-size:0.875rem;font-style:italic;line-height:1.5;text-align:center;color:rgb(251 248 244 / 0.8);pointer-events:auto}#footer .api-sdk-terms-notice a{position:relative;z-index:2;color:var(--op-cornflower);text-decoration:underline;text-underline-offset:2px;pointer-events:auto;cursor:pointer}a:has(>img.nav-logo){display:flex;align-items:center;gap:0.25rem}a:has(>img.nav-logo)::after{content:\"Developers\";font-weight:700;font-size:1.3125rem;line-height:1;letter-spacing:-0.01em;color:#303136;white-space:nowrap}.dark a:has(>img.nav-logo)::after,#footer a:has(>img.nav-logo)::after{color:#FFFEFB}#footer a:has(>img.nav-logo)::after{font-size:1.25rem}"}],"page":{"pagePath":"events-api/beta/reference/get-v3-auditevents","slug":"/events-api/beta/reference/get-v3-auditevents","pageMetadata":{"title":"Retrieve audit events (v3 beta)","sidebarTitle":"Audit events (v3 beta)","openapi":"openapi/events_api_v3_beta.yaml GET /api/v3/auditevents","description":"Get a list of v3 audit events for actions performed by team members within a 1Password account.","href":"/events-api/beta/reference/get-v3-auditevents"},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Get a list of v3 audit events for actions performed by team members within a 1Password account.\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx,jsxs:_jsxs}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){const _components={a:`a`,code:`code`,p:`p`,..._provideComponents(),...props.components},{Warning}=_components;if(!Warning)_missingMdxReference(`Warning`,true);return _jsxs(_Fragment,{children:[_jsx(_components.p,{children:`Retrieve event data from your 1Password account to determine who performed an action and when, like when a team member edits an item’s password or invites another team member to a shared vault.`}),`\n`,_jsxs(_components.p,{children:[`Use the `,_jsx(_components.code,{children:`start_time`}),` and `,_jsx(_components.code,{children:`end_time`}),` parameters to filter events by the time they were ingested by 1Password (`,_jsx(_components.code,{children:`insert_time`}),`), not the time they occurred (`,_jsx(_components.code,{children:`create_time`}),`). To continue polling for new events, start a new request using the `,_jsx(_components.code,{children:`insert_time`}),` of the last event as the value for `,_jsx(_components.code,{children:`start_time`}),`. Learn more about `,_jsx(_components.a,{href:`/events-api/beta/conventions#continuous-polling`,children:`continuous polling`}),` in the beta API.`]}),`\n`,_jsxs(_components.p,{children:[`Use `,_jsx(_components.code,{children:`max_page_size`}),` to set the number of events returned per page (100 by default, up to 1000). If more results are available, the response includes a `,_jsx(_components.code,{children:`next_page_token`}),` at the top level. Pass it in the `,_jsx(_components.code,{children:`page_token`}),` query parameter to fetch the next page.`]}),`\n`,_jsx(Warning,{children:_jsxs(_components.p,{children:[`Don’t use the `,_jsx(_components.code,{children:`start_time`}),` or `,_jsx(_components.code,{children:`end_time`}),` query parameters in a request that also uses the `,_jsx(_components.code,{children:`page_token`}),` query parameter. Doing so will result in a `,_jsx(_components.code,{children:`400`}),` bad request error.`]})}),`\n`,_jsxs(_components.p,{children:[`If the response is successful but there aren’t any events for the parameters you requested, the `,_jsx(_components.code,{children:`audit_events`}),` array is empty (`,_jsx(_components.code,{children:`[]`}),`).`]}),`\n`,_jsxs(_components.p,{children:[`This endpoint is rate limited. Requests that exceed the limit return a `,_jsx(_components.code,{children:`429 Too Many Requests`}),` error and include a `,_jsx(_components.code,{children:`Retry-After`}),` header. `,_jsx(_components.a,{href:`/events-api/beta/conventions#rate-limits`,children:`Learn more about rate limits.`})]}),`\n`,_jsxs(_components.p,{children:[`See the `,_jsx(_components.a,{href:`/events-api/beta/conventions`,children:`API conventions`}),` for more information about authentication, pagination, filtering, and error handling.`]})]})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent};function _missingMdxReference(id,component){throw new Error(`Expected `+(component?`component`:`object`)+\" `\"+id+\"` to be defined: you likely forgot to import, pass, or provide it.\")}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Retrieve audit events (v3 beta)","sidebarTitle":"Audit events (v3 beta)","openapi":"openapi/events_api_v3_beta.yaml GET /api/v3/auditevents","description":"Get a list of v3 audit events for actions performed by team members within a 1Password account.","href":"/events-api/beta/reference/get-v3-auditevents"}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":["/_mintlify/custom/ab-634991b8/5ebc0d10523e8210/static/js/analytics.js","/_mintlify/custom/ab-634991b8/5bb7437b1c9dcb44/static/js/gtag-prod-sst.js","/_mintlify/custom/ab-634991b8/ee8ea0eeb20ecd1e/static/js/gtag-sst.js","/_mintlify/custom/ab-634991b8/31610123c784b7c4/api-sdk-terms-notice.js","/_mintlify/custom/ab-634991b8/3604035e212f8294/homepage-card-icons.js"],"openApiReferenceData":{"operation":{"description":"Get a list of v3 audit events for actions performed by team members within a 1Password account.","x-original-description":"Returns a paginated list of audit events describing actions taken by team members in the authenticated 1Password account. Use optional time bounds and the pagination parameters to page through results.","summary":"Retrieve audit events (v3 beta)","x-original-summary":"Retrieves audit events for actions performed by team members within a 1Password account.","tags":["Audit events"],"operationId":"ListAuditEvents","security":["b7ba378b-1c0f-4ee4-b319-9b81e4fd2a03"],"parameters":["1f375804-f3a9-4d1b-9bbd-18f882f0914d","4af2becf-d1c1-4ce3-a2ec-203f6b8f52ec","e8bcb373-52df-4da2-90d5-f063eebe6c63","e88fe8ae-5681-4444-b93a-430b44854956"],"responses":{"200":"2b994b66-488d-441c-a3f5-161622d46191","400":"5f1eca27-24dc-48aa-810e-cee688b11d9b","401":"00d21ebf-d5d8-41bd-a1c4-41bba3dcfc93","429":"99f87ae3-e90a-4d81-98b7-9e7dc2fdd1f2","500":"3d2fdf0e-f558-46bf-85f8-b26421e0ffe3","default":"0f9d9e3e-86f9-4190-be1e-ee453dffac31"},"method":"get","type":"path","servers":["e9059028-2c9a-4a22-94e5-746e8277199e","21d4db91-5de7-4f86-b48a-f300fe35f32c","fce5ec53-4bf4-4fb7-aafa-f882860ec018","696b5283-6b6d-48e1-a968-c495bd78c812"],"path":"/api/v3/auditevents","baseUrlOptions":["https://events.1password.com","https://events.1password.ca","https://events.1password.eu","https://events.ent.1password.com"],"title":"Retrieve audit events (v3 beta)","codeSamples":[],"requestExampleLanguages":["bash","node","python","go","dotnet","java","php","powershell","ruby"],"requiredOnlyExamples":false,"requestExampleType":"generated","responseExampleType":"generated"},"dependencies":{"parameters":{"1f375804-f3a9-4d1b-9bbd-18f882f0914d":{"in":"query","name":"max_page_size","description":"The maximum number of events to return per page, from `0` to `1000`. If you omit this parameter or set it to `0`, the server default of `100` is used. The endpoint accepts any positive value, but returns no more than `1000` events per page.","x-original-description":"The maximum number of results to return in a single request.","example":100,"schema":{"type":"integer","default":100,"minimum":0,"maximum":1000,"description":"The maximum number of events to return per page, from `0` to `1000`. If you omit this parameter or set it to `0`, the server default of `100` is used. The endpoint accepts any positive value, but returns no more than `1000` events per page.","uniqueKey":"","typeLabel":"integer"}},"4af2becf-d1c1-4ce3-a2ec-203f6b8f52ec":{"in":"query","name":"page_token","description":"An opaque cursor token that identifies the next page of results to retrieve. Use the `next_page_token` value from the previous response. Don't use the `start_time` or `end_time` parameters with `page_token`: doing so returns a `400` bad request error.","x-original-description":"An opaque token identifying the next page of results to retrieve.","schema":{"type":"string","description":"An opaque cursor token that identifies the next page of results to retrieve. Use the `next_page_token` value from the previous response. Don't use the `start_time` or `end_time` parameters with `page_token`: doing so returns a `400` bad request error.","uniqueKey":"","typeLabel":"string"}},"e8bcb373-52df-4da2-90d5-f063eebe6c63":{"in":"query","name":"start_time","description":"The lower bound insertion time for which to retrieve results, filtering on when events were ingested, not when they occurred. This bound is exclusive: only events whose insertion time is strictly greater than `start_time` are returned. Invalid if `page_token` is specified. Uses the RFC 3339 standard.","x-original-description":"The lower bound insertion time for which to retrieve results, filtering on when events were ingested, not when they occurred. This bound is exclusive: only events whose insertion time is strictly greater than start_time are returned. Invalid if page_token is specified.","example":"2026-05-29T18:00:00Z","schema":{"type":"string","format":"date-time","description":"The lower bound insertion time for which to retrieve results, filtering on when events were ingested, not when they occurred. This bound is exclusive: only events whose insertion time is strictly greater than `start_time` are returned. Invalid if `page_token` is specified. Uses the RFC 3339 standard.","uniqueKey":"","typeLabel":"string\u003cdate-time>"}},"e88fe8ae-5681-4444-b93a-430b44854956":{"in":"query","name":"end_time","description":"The upper bound insertion time for which to retrieve results, filtering on when events were ingested, not when they occurred. This bound is exclusive: only events whose insertion time is strictly less than `end_time` are returned. Invalid if `page_token` is specified. Uses the RFC 3339 standard.","x-original-description":"The upper bound insertion time for which to retrieve results, filtering on when events were ingested, not when they occurred. This bound is exclusive: only events whose insertion time is strictly less than end_time are returned. Invalid if page_token is specified.","example":"2026-05-29T18:59:59Z","schema":{"type":"string","format":"date-time","description":"The upper bound insertion time for which to retrieve results, filtering on when events were ingested, not when they occurred. This bound is exclusive: only events whose insertion time is strictly less than `end_time` are returned. Invalid if `page_token` is specified. Uses the RFC 3339 standard.","uniqueKey":"","typeLabel":"string\u003cdate-time>"}}},"responses":{"2b994b66-488d-441c-a3f5-161622d46191":{"description":"A subset of the audit events that match the request, with a token to fetch the next page of results if more are available. If no events match, the `audit_events` array is empty.","x-original-description":"Audit events response object","headers":{"RateLimit-Limit":{"description":"The request quota for the associated client in the current time window.","schema":{"type":"integer"},"example":600},"RateLimit-Remaining":{"description":"The remaining request quota for the associated client.","schema":{"type":"integer"},"example":599},"RateLimit-Reset":{"description":"Unix timestamp that indicates the number of seconds until the request quota is reset for the associated client.","schema":{"type":"integer"},"example":1767735927}},"content":{"application/json":{"example":{"audit_events":[{"action":"vault.access.update","actor":{"email":"wendy_appleseed@agilebits.com","name":"Wendy Appleseed","type":"user","id":"4HCGRGYCTRQFBMGVEGTABYDU2V"},"category":"vault","context":{"account":{"name":"AgileBits","id":"VZSYVT2LGHTBWBQGUJAIZVRABM"},"client":{"name":"1Password Extension","version":"81224010"},"device":{"model":"149.0.7827.22","name":"Chrome extension","id":"xa2p3x45d6vbk7noqnom89rxqm"},"location":{"city":"Toronto","ip_address":"192.0.2.254","latitude":43.6425,"longitude":-79.387,"region_code":"CA"},"origin":"Admin Console","os":{"name":"MacOSX","version":"26.5.0"},"session":{"login_time":"2026-05-29T18:29:46.871840158Z","id":"X6TARAEE2NGKFLMK5POQBZ4U2Q"},"user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"},"correlation_id":"BENRUNBI3JCPPLFFRZTQA6XWIZ","create_time":"2026-05-29T18:36:31Z","diff":{"new_value":{"acl":15730674,"aclDescription":["manage","reveal-password","read-item","update-item","create-item","archive-item","delete-item","view-item-history","send-item"]},"old_value":{"acl":15730672,"aclDescription":["read-item"]},"type":"user-vault-access-change"},"insert_time":"2026-05-29T18:36:31.883698939Z","targets":[{"payload":{"type":"U","typeDescription":"user-created","id":"lc5fqgbrcm4plajd8mwncv2b3u"},"type":"vault"},{"payload":{"email":"wendyappleseed+1@1password.com","name":"Wendy Appleseed","id":"OYBARQG5SNEFZHGYT4NDXCHGNI"},"type":"user"}],"id":"A5K6COGVRVEJXJW3XQZGS7VAMM"}],"next_page_token":"CAESCwiY84XSBhC0qu9uGgYIgO600wYg_qXh7fMzKhpXNFRTRVA3UDVSSFBCQUpKM1JDWkdYTFpESQ"},"schema":{"type":"object","required":["audit_events"],"properties":{"audit_events":{"type":"array","description":"A subset of the requested audit events. An empty array (`[]`) indicates that no events match the request.","items":{"type":"object","required":["id","create_time","insert_time","context","actor","category","action","targets"],"description":"A single audit event object.","properties":{"id":{"type":"string","description":"Unique identifier for the audit event.","example":"56YE2TYN2VFYRLNSHKPW5NVT5E","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].id","typeLabel":"string"},"create_time":{"type":"string","format":"date-time","description":"The date and time when the event occurred. Uses the RFC 3339 standard.","x-original-description":"The time the event occurred.","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].create_time","typeLabel":"string\u003cdate-time>"},"insert_time":{"type":"string","format":"date-time","description":"The date and time when the event was received and stored by 1Password. The `start_time` and `end_time` query parameters filter on this field. Uses the RFC 3339 standard.","x-original-description":"The time the event was received and stored by 1Password.","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].insert_time","typeLabel":"string\u003cdate-time>"},"context":{"type":"object","description":"Information about how the event was initiated.","required":["account","origin","location"],"example":{"account":{"id":"3JPKX6XC6BDDBJGJYCLOSVXQE4","name":"Some Account Name"},"origin":"password_manager","session":{"id":"UFR7T3I2FZAQ5GGFYQIY7YUGKE","login_time":"2025-01-01T00:00:00Z"},"location":{"ip_address":"192.168.1.1","region_code":"CA","city":"Toronto","latitude":43.65,"longitude":79.38},"device":{"id":"voruqc6amjy4gs4oh2qs3fw4i4","model":"141.0","name":"Safari"},"client":{"name":"1Password Extension","version":"81104027"},"os":{"name":"MacOSX","version":"10.15"},"user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.1 Safari/605.1.15"},"properties":{"account":{"type":"object","description":"The account associated with the event.","required":["id","name"],"properties":{"id":{"type":"string","description":"ID of the account.","example":"56YE2TYN2VFYRLNSHKPW5NVT5E","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].context.account.id","typeLabel":"string"},"name":{"type":"string","description":"Name of the account.","example":"Some Account Name","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].context.account.name","typeLabel":"string"}},"isRequired":true,"uniqueKey":"audit_events.items.[INDEX].context.account","typeLabel":"object"},"origin":{"type":"string","description":"The application or interface where the event occurred. For example: `password_manager`.","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].context.origin","typeLabel":"string"},"location":{"type":"object","description":"Where the event originated.","required":["ip_address"],"properties":{"ip_address":{"type":"string","description":"IP address from which the event originated.","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].context.location.ip_address","typeLabel":"string"},"region_code":{"type":"string","description":"The Unicode CLDR region code associated with the IP address. For example, `CA` for Canada or `DE` for Germany.","uniqueKey":"audit_events.items.[INDEX].context.location.region_code","typeLabel":"string"},"city":{"type":"string","description":"City associated with the IP address.","uniqueKey":"audit_events.items.[INDEX].context.location.city","typeLabel":"string"},"latitude":{"type":"number","format":"float","description":"Latitude of the location.","uniqueKey":"audit_events.items.[INDEX].context.location.latitude","typeLabel":"number\u003cfloat>"},"longitude":{"type":"number","format":"float","description":"Longitude of the location.","uniqueKey":"audit_events.items.[INDEX].context.location.longitude","typeLabel":"number\u003cfloat>"}},"isRequired":true,"uniqueKey":"audit_events.items.[INDEX].context.location","typeLabel":"object"},"session":{"type":"object","description":"The session in which the event occurred.","required":["id","login_time"],"properties":{"id":{"type":"string","description":"ID of the session.","example":"56YE2TYN2VFYRLNSHKPW5NVT5E","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].context.session.id","typeLabel":"string"},"login_time":{"type":"string","format":"date-time","description":"Time when the session was created.","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].context.session.login_time","typeLabel":"string\u003cdate-time>"}},"uniqueKey":"audit_events.items.[INDEX].context.session","typeLabel":"object"},"device":{"type":"object","description":"The device used to initiate the event.","required":["id","model","name"],"properties":{"id":{"type":"string","description":"ID of the device.","example":"56YE2TYN2VFYRLNSHKPW5NVT5E","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].context.device.id","typeLabel":"string"},"model":{"type":"string","description":"Model of the device.","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].context.device.model","typeLabel":"string"},"name":{"type":"string","description":"Name of the device. For example: `Safari`.","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].context.device.name","typeLabel":"string"}},"uniqueKey":"audit_events.items.[INDEX].context.device","typeLabel":"object"},"client":{"type":"object","description":"The 1Password client used (app or integration).","required":["name","version"],"properties":{"name":{"type":"string","description":"Name of the client that was used.","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].context.client.name","typeLabel":"string"},"version":{"type":"string","description":"Version of the client that was used.","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].context.client.version","typeLabel":"string"}},"uniqueKey":"audit_events.items.[INDEX].context.client","typeLabel":"object"},"os":{"type":"object","description":"The operating system.","required":["name","version"],"properties":{"name":{"type":"string","description":"Name of the operating system that was used.","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].context.os.name","typeLabel":"string"},"version":{"type":"string","description":"Version of the operating system that was used.","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].context.os.version","typeLabel":"string"}},"uniqueKey":"audit_events.items.[INDEX].context.os","typeLabel":"object"},"user_agent":{"type":"string","description":"The user agent string reported by the client, when available.","uniqueKey":"audit_events.items.[INDEX].context.user_agent","typeLabel":"string"}},"isRequired":true,"uniqueKey":"audit_events.items.[INDEX].context","typeLabel":"object"},"actor":{"type":"object","description":"Who initiated the event.","required":["type","id"],"example":{"type":"user","id":"56YE2TYN2VFYRLNSHKPW5NVT5E","name":"Some User","email":"user.email@domain.com","linked_account":{"id":"3JPKX6XC6BDDBJGJYCLOSVXQE4","name":"Some Account Name","state":"A","type":"B","domain":"domain.com"}},"properties":{"type":{"type":"string","description":"The type of actor. For example: `user`.","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].actor.type","typeLabel":"string"},"id":{"type":"string","description":"ID of the actor.","example":"56YE2TYN2VFYRLNSHKPW5NVT5E","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].actor.id","typeLabel":"string"},"name":{"type":"string","description":"Display name of the actor, if available.","uniqueKey":"audit_events.items.[INDEX].actor.name","typeLabel":"string"},"email":{"type":"string","format":"email","description":"Email address of the actor, if available.","uniqueKey":"audit_events.items.[INDEX].actor.email","typeLabel":"string\u003cemail>"},"linked_account":{"type":"object","description":"An account describing a related account, if any.","required":["id","name","state","type","domain"],"example":{"id":"56YE2TYN2VFYRLNSHKPW5NVT5E","name":"Some Account Name","state":"A","type":"B","domain":"domain.com"},"properties":{"id":{"type":"string","description":"A generic identifier.","example":"56YE2TYN2VFYRLNSHKPW5NVT5E","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].actor.linked_account.id","typeLabel":"string"},"name":{"type":"string","description":"Name of the account.","example":"Some Account Name","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].actor.linked_account.name","typeLabel":"string"},"state":{"type":"string","description":"State of the account. For example: `A`.","example":"A","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].actor.linked_account.state","typeLabel":"string"},"type":{"type":"string","description":"Type of the account. For example: `B`.","example":"B","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].actor.linked_account.type","typeLabel":"string"},"domain":{"type":"string","description":"Domain associated with the account. For example: `domain.com`.","example":"domain.com","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].actor.linked_account.domain","typeLabel":"string"}},"uniqueKey":"audit_events.items.[INDEX].actor.linked_account","typeLabel":"object"}},"isRequired":true,"uniqueKey":"audit_events.items.[INDEX].actor","typeLabel":"object"},"category":{"type":"string","description":"High-level category of the event. For example: `report`.","example":"report","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].category","typeLabel":"string"},"action":{"type":"string","description":"Specific action taken. For example: `report.view`.","example":"report.view","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].action","typeLabel":"string"},"targets":{"type":"array","description":"Entities that describe what was affected.","items":{"type":"object","description":"An entity which was affected by a given event.","required":["type","payload"],"properties":{"type":{"type":"string","description":"Type of entity affected by a given event. An entity may contain a number of additional properties specific to its type. For example: `report`, `user`, or other resource types.","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].targets.items.[INDEX].type","typeLabel":"string"},"payload":{"type":"object","description":"Additional properties describing the entity.","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].targets.items.[INDEX].payload","typeLabel":"object"}},"uniqueKey":"audit_events.items.[INDEX].targets.items.[INDEX]","typeLabel":"object"},"example":[{"type":"report","payload":{"name":"sign-in-attempts"}},{"type":"user","payload":{}}],"isRequired":true,"uniqueKey":"audit_events.items.[INDEX].targets","typeLabel":"object[]"},"diff":{"type":"object","description":"The change made by the event. Only present for events that represent a change. For example, if a user's vault access has been updated to add or remove permissions.","required":["type","old_value","new_value"],"example":{"type":"account-change","old_value":{"type":"B"},"new_value":{"type":"F"}},"properties":{"type":{"type":"string","description":"The type of change made by the event. For example: `account-change`.","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].diff.type","typeLabel":"string"},"old_value":{"type":"object","description":"The previous value before the change. The shape of the object depends on the `type`.","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].diff.old_value","typeLabel":"object"},"new_value":{"type":"object","description":"The new value after the change. The shape of the object depends on the `type`.","isRequired":true,"uniqueKey":"audit_events.items.[INDEX].diff.new_value","typeLabel":"object"}},"uniqueKey":"audit_events.items.[INDEX].diff","typeLabel":"object"},"correlation_id":{"type":"string","description":"An optional identifier shared by audit events that originated from the same bulk action. Use it to group related events from a single bulk operation. For example, a bulk user invitation or updating multiple permissions at the same time.","x-original-description":"An optional identifier shared by audit events that originated from the same bulk action.","example":"C7VYQXG3CZGBVHR2YOL5LXKNJI","uniqueKey":"audit_events.items.[INDEX].correlation_id","typeLabel":"string"}},"uniqueKey":"audit_events.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"audit_events","typeLabel":"object[]"},"next_page_token":{"type":"string","description":"An opaque token used to retrieve the next page of results. Pass it as the `page_token` query parameter on the next request. Present only when additional results are available; if it's absent, there are no more pages.\n","example":"CAESCwiY84XSBhC0qu9uGgYIgO600wYg_qXh7fMzKhpXNFRTRVA3UDVSSFBCQUpKM1JDWkdYTFpESQ","uniqueKey":"next_page_token","typeLabel":"string"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"audit_events":[{"action":"vault.access.update","actor":{"email":"wendy_appleseed@agilebits.com","name":"Wendy Appleseed","type":"user","id":"4HCGRGYCTRQFBMGVEGTABYDU2V"},"category":"vault","context":{"account":{"name":"AgileBits","id":"VZSYVT2LGHTBWBQGUJAIZVRABM"},"client":{"name":"1Password Extension","version":"81224010"},"device":{"model":"149.0.7827.22","name":"Chrome extension","id":"xa2p3x45d6vbk7noqnom89rxqm"},"location":{"city":"Toronto","ip_address":"192.0.2.254","latitude":43.6425,"longitude":-79.387,"region_code":"CA"},"origin":"Admin Console","os":{"name":"MacOSX","version":"26.5.0"},"session":{"login_time":"2026-05-29T18:29:46.871840158Z","id":"X6TARAEE2NGKFLMK5POQBZ4U2Q"},"user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"},"correlation_id":"BENRUNBI3JCPPLFFRZTQA6XWIZ","create_time":"2026-05-29T18:36:31Z","diff":{"new_value":{"acl":15730674,"aclDescription":["manage","reveal-password","read-item","update-item","create-item","archive-item","delete-item","view-item-history","send-item"]},"old_value":{"acl":15730672,"aclDescription":["read-item"]},"type":"user-vault-access-change"},"insert_time":"2026-05-29T18:36:31.883698939Z","targets":[{"payload":{"type":"U","typeDescription":"user-created","id":"lc5fqgbrcm4plajd8mwncv2b3u"},"type":"vault"},{"payload":{"email":"wendyappleseed+1@1password.com","name":"Wendy Appleseed","id":"OYBARQG5SNEFZHGYT4NDXCHGNI"},"type":"user"}],"id":"A5K6COGVRVEJXJW3XQZGS7VAMM"}],"next_page_token":"CAESCwiY84XSBhC0qu9uGgYIgO600wYg_qXh7fMzKhpXNFRTRVA3UDVSSFBCQUpKM1JDWkdYTFpESQ"}}},"exampleType":"examples"}},"exampleType":"examples"},"5f1eca27-24dc-48aa-810e-cee688b11d9b":{"description":"Bad Request. A request parameter is invalid, for example when `start_time` or `end_time` is used together with `page_token`.","x-original-description":"Bad Request","content":{"application/json":{"schema":{"type":"object","description":"A generic error.","required":["type","message"],"properties":{"type":{"type":"string","description":"A machine-readable error type identifier. Values are Connect/gRPC status code names per AEP-193.","example":"unauthenticated","isRequired":true,"uniqueKey":"type","typeLabel":"string"},"message":{"type":"string","description":"A human-readable description of the error.","example":"An error occurred while processing the request.","isRequired":true,"uniqueKey":"message","typeLabel":"string"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"type":"unauthenticated","message":"An error occurred while processing the request."}}},"exampleType":"generated"}},"exampleType":"generated"},"00d21ebf-d5d8-41bd-a1c4-41bba3dcfc93":{"description":"Unauthorized. The bearer token is missing or invalid.","x-original-description":"Unauthorized","content":{"application/json":{"schema":{"type":"object","description":"A generic error.","required":["type","message"],"properties":{"type":{"type":"string","description":"A machine-readable error type identifier. Values are Connect/gRPC status code names per AEP-193.","example":"unauthenticated","isRequired":true,"uniqueKey":"type","typeLabel":"string"},"message":{"type":"string","description":"A human-readable description of the error.","example":"An error occurred while processing the request.","isRequired":true,"uniqueKey":"message","typeLabel":"string"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"type":"unauthenticated","message":"An error occurred while processing the request."}}},"exampleType":"generated"}},"exampleType":"generated"},"99f87ae3-e90a-4d81-98b7-9e7dc2fdd1f2":{"description":"Too Many Requests. The rate limit was exceeded. Wait the number of seconds in the `Retry-After` header before sending another request.","x-original-description":"Too Many Requests","headers":{"RateLimit-Limit":{"description":"The request quota for the associated client in the current time window.","schema":{"type":"integer"},"example":600},"RateLimit-Remaining":{"description":"The remaining request quota for the associated client.","schema":{"type":"integer"},"example":599},"RateLimit-Reset":{"description":"Unix timestamp that indicates the number of seconds until the request quota is reset for the associated client.","schema":{"type":"integer"},"example":1767735927},"Retry-After":{"schema":{"type":"integer"},"description":"The number of seconds until requests from this client will be allowed again.","example":60}},"content":{"application/json":{"schema":{"type":"object","description":"A generic error.","required":["type","message"],"properties":{"type":{"type":"string","description":"A machine-readable error type identifier. Values are Connect/gRPC status code names per AEP-193.","example":"unauthenticated","isRequired":true,"uniqueKey":"type","typeLabel":"string"},"message":{"type":"string","description":"A human-readable description of the error.","example":"An error occurred while processing the request.","isRequired":true,"uniqueKey":"message","typeLabel":"string"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"type":"unauthenticated","message":"An error occurred while processing the request."}}},"exampleType":"generated"}},"exampleType":"generated"},"3d2fdf0e-f558-46bf-85f8-b26421e0ffe3":{"description":"Internal Server Error.","x-original-description":"Internal Server Error","content":{"application/json":{"schema":{"type":"object","description":"A generic error.","required":["type","message"],"properties":{"type":{"type":"string","description":"A machine-readable error type identifier. Values are Connect/gRPC status code names per AEP-193.","example":"unauthenticated","isRequired":true,"uniqueKey":"type","typeLabel":"string"},"message":{"type":"string","description":"A human-readable description of the error.","example":"An error occurred while processing the request.","isRequired":true,"uniqueKey":"message","typeLabel":"string"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"type":"unauthenticated","message":"An error occurred while processing the request."}}},"exampleType":"generated"}},"exampleType":"generated"},"0f9d9e3e-86f9-4190-be1e-ee453dffac31":{"description":"Generic error.","x-original-description":"Generic error","content":{"application/json":{"schema":{"type":"object","description":"A generic error.","required":["type","message"],"properties":{"type":{"type":"string","description":"A machine-readable error type identifier. Values are Connect/gRPC status code names per AEP-193.","example":"unauthenticated","isRequired":true,"uniqueKey":"type","typeLabel":"string"},"message":{"type":"string","description":"A human-readable description of the error.","example":"An error occurred while processing the request.","isRequired":true,"uniqueKey":"message","typeLabel":"string"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"type":"unauthenticated","message":"An error occurred while processing the request."}}},"exampleType":"generated"}},"exampleType":"generated"}},"security":{"b7ba378b-1c0f-4ee4-b319-9b81e4fd2a03":{"Jwt-saBearerAuth":{"type":"http","scheme":"bearer","bearerFormat":"JWT","description":"Bearer authentication using a JWT issued for a service account. Use the bearer token from your Events Reporting integration, scoped to access audit events.","x-original-description":"Bearer authentication using a JWT issued for a service account.","scopes":[],"schemeName":"Jwt-saBearerAuth"}}},"servers":{"e9059028-2c9a-4a22-94e5-746e8277199e":{"url":"https://events.1password.com","description":"1Password"},"21d4db91-5de7-4f86-b48a-f300fe35f32c":{"url":"https://events.1password.ca","description":"1Password CA"},"fce5ec53-4bf4-4fb7-aafa-f882860ec018":{"url":"https://events.1password.eu","description":"1Password EU"},"696b5283-6b6d-48e1-a968-c495bd78c812":{"url":"https://events.ent.1password.com","description":"1Password Enterprise"}},"processedSecurityOptions":[{"schemes":[{"scheme":{"type":"http","scheme":"bearer","bearerFormat":"JWT","description":"Bearer authentication using a JWT issued for a service account. Use the bearer token from your Events Reporting integration, scoped to access audit events.","x-original-description":"Bearer authentication using a JWT issued for a service account.","scopes":[],"schemeName":"Jwt-saBearerAuth"},"schema":{"title":"Bearer Auth","type":"string","isRequired":true,"description":"Bearer authentication using a JWT issued for a service account. Use the bearer token from your Events Reporting integration, scoped to access audit events.","format":"bearer","typeLabel":"string\u003cbearer>","deprecated":false},"schemeName":"Jwt-saBearerAuth","name":"Authorization"}],"title":"Jwt-saBearerAuth"}]},"originalFileLocation":"openapi/events_api_v3_beta.yaml"},"subdomain":"ab-634991b8","siteName":"1Password Developer","title":"Retrieve audit events (v3 beta) - 1Password Developer","relatedPagesConfig":{"enabled":true,"limit":3,"mode":"automatic"},"contextualStarterQuestions":[{"_id":"6aea2917ba04ff9c17a9a647","deploymentId":"68a8af9a517ab813d3b84097","questionText":"How do I filter events by time?","status":"active","generatedBy":"contextual","path":"events-api/beta/reference/get-v3-auditevents","createdAt":"2026-11-03T18:33:59.205Z","updatedAt":"2026-11-03T18:33:59.205Z","__v":0},{"_id":"6aea2917ba04ff9c17a9a649","deploymentId":"68a8af9a517ab813d3b84097","questionText":"How do I handle rate limits?","status":"active","generatedBy":"contextual","path":"events-api/beta/reference/get-v3-auditevents","createdAt":"2026-11-03T18:33:59.205Z","updatedAt":"2026-11-03T18:33:59.205Z","__v":0},{"_id":"6aea2917ba04ff9c17a9a648","deploymentId":"68a8af9a517ab813d3b84097","questionText":"What does max_page_size control?","status":"active","generatedBy":"contextual","path":"events-api/beta/reference/get-v3-auditevents","createdAt":"2026-11-03T18:33:59.205Z","updatedAt":"2026-11-03T18:33:59.205Z","__v":0}],"navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-11-03T18:33:46.811Z","originalFileLocation":"events-api/beta/reference/get-v3-auditevents.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Get a list of v3 audit events for actions performed by team members within a 1Password account.\">\u003cmeta data-mint-head name=\"application-name\" content=\"1Password Developer\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/ab-634991b8/cic7o6CrHhA6877e/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/ab-634991b8/cic7o6CrHhA6877e/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/ab-634991b8/cic7o6CrHhA6877e/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/ab-634991b8/cic7o6CrHhA6877e/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/ab-634991b8/cic7o6CrHhA6877e/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/ab-634991b8/cic7o6CrHhA6877e/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/ab-634991b8/cic7o6CrHhA6877e/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/ab-634991b8/cic7o6CrHhA6877e/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/ab-634991b8/cic7o6CrHhA6877e/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Retrieve audit events (v3 beta) - 1Password Developer\">\u003cmeta data-mint-head property=\"og:description\" content=\"Get a list of v3 audit events for actions performed by team members within a 1Password account.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"1Password Developer\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://www.1password.dev/events-api/beta/reference/get-v3-auditevents\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://ab-634991b8.mintlify.site/_mintlify/api/og/v2?division=API+reference\u0026amp;title=Retrieve+audit+events+%28v3+beta%29\u0026amp;description=Get+a+list+of+v3+audit+events+for+actions+performed+by+team+members+within+a+1Password+account.\u0026amp;theme=4f276e23841331680610e0c6\u0026amp;signature=f895fe6b6108c098d86a616677eb27b57b41596c39ed9fec198687fb3f9c96ac\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Retrieve audit events (v3 beta) - 1Password Developer\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Get a list of v3 audit events for actions performed by team members within a 1Password account.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://ab-634991b8.mintlify.site/_mintlify/api/og/v2?division=API+reference\u0026amp;title=Retrieve+audit+events+%28v3+beta%29\u0026amp;description=Get+a+list+of+v3+audit+events+for+actions+performed+by+team+members+within+a+1Password+account.\u0026amp;theme=4f276e23841331680610e0c6\u0026amp;signature=f895fe6b6108c098d86a616677eb27b57b41596c39ed9fec198687fb3f9c96ac\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/ab-634991b8/cic7o6CrHhA6877e/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"1Password Developer\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#145FE4\">\u003cmeta data-mint-head name=\"google-site-verification\" content=\"YserOhXnJUjFfIZ4K3qgxkVSlQZQdXtIbBiKzZ35Nvs\">\u003clink data-mint-head rel=\"canonical\" href=\"https://www.1password.dev/events-api/beta/reference/get-v3-auditevents\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/events-api/beta/reference/get-v3-auditevents.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://www.1password.dev/#organization\",\"name\":\"1Password Developer\",\"url\":\"https://www.1password.dev\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/ab-634991b8/tWWm5UFlpZQ9nof8/images/logo-1password-dark.svg?fit=max\u0026auto=format\u0026n=tWWm5UFlpZQ9nof8\u0026q=85\u0026s=2c2acc6dc5f817defe70ebdef67c9b11\"}},{\"@type\":\"WebSite\",\"@id\":\"https://www.1password.dev#website\",\"name\":\"1Password Developer\",\"url\":\"https://www.1password.dev\",\"publisher\":{\"@id\":\"https://www.1password.dev/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://www.1password.dev/events-api/beta/reference/get-v3-auditevents#webpage\",\"url\":\"https://www.1password.dev/events-api/beta/reference/get-v3-auditevents\",\"name\":\"Retrieve audit events (v3 beta)\",\"description\":\"Get a list of v3 audit events for actions performed by team members within a 1Password account.\",\"dateModified\":\"2026-11-03T18:33:46.811Z\",\"isPartOf\":{\"@id\":\"https://www.1password.dev#website\"},\"breadcrumb\":{\"@id\":\"https://www.1password.dev/events-api/beta/reference/get-v3-auditevents#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://www.1password.dev/events-api/beta/reference/get-v3-auditevents#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Events API\",\"item\":\"https://www.1password.dev/events-api\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Events API v3 beta\",\"item\":\"https://www.1password.dev/events-api/beta\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"API reference\",\"item\":\"https://www.1password.dev/events-api/beta/reference\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Retrieve audit events (v3 beta)\",\"item\":\"https://www.1password.dev/events-api/beta/reference/get-v3-auditevents\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://www.1password.dev/events-api/beta/reference/get-v3-auditevents#apireference\",\"headline\":\"Retrieve audit events (v3 beta)\",\"name\":\"Retrieve audit events (v3 beta)\",\"description\":\"Get a list of v3 audit events for actions performed by team members within a 1Password account.\",\"url\":\"https://www.1password.dev/events-api/beta/reference/get-v3-auditevents\",\"mainEntityOfPage\":{\"@id\":\"https://www.1password.dev/events-api/beta/reference/get-v3-auditevents#webpage\"},\"dateModified\":\"2026-11-03T18:33:46.811Z\",\"publisher\":{\"@id\":\"https://www.1password.dev/#organization\"},\"isPartOf\":{\"@id\":\"https://www.1password.dev#website\"}}]}\u003c/script>","agentPointerHref":"/events-api/beta/reference/get-v3-auditevents.md","siteName":"1Password Developer","nav":{"global":null,"tabs":[{"tab":"Get started","pages":[{"title":"Get started","href":"/get-started/developer-quickstart"}]},{"tab":"CLI","pages":[{"title":"CLI","href":"/cli"}]},{"tab":"SSH \u0026 Git","pages":[{"title":"SSH \u0026 Git","href":"/ssh"}]},{"tab":"Environments","pages":[{"title":"Environments","href":"/environments"}]},{"tab":"AI agents","pages":[{"title":"AI agents","href":"/security-for-ai"}]},{"tab":"Service Accounts","pages":[{"title":"Service Accounts","href":"/service-accounts"}]},{"tab":"CI/CD \u0026 infrastructure","pages":[{"title":"CI/CD \u0026 infrastructure","href":"/integrations"}]},{"tab":"SDKs \u0026 APIs","menu":[{"item":"SDKs","icon":"cube","pages":[{"title":"SDKs","href":"/sdks"}]},{"item":"Events API","icon":"sensor-triangle-exclamation","groups":[{"group":"Events API","pages":[{"title":"1Password Events API","sidebarTitle":"Overview","href":"/events-api"},{"title":"Get started with the 1Password Events API","sidebarTitle":"Get started","href":"/events-api/get-started"},{"group":"About the API","pages":[{"title":"About the 1Password Events API","sidebarTitle":"Introduction","href":"/events-api/introduction"},{"title":"Authorization","sidebarTitle":"Authorization","href":"/events-api/authorization"},{"title":"Events API conventions","sidebarTitle":"API conventions","href":"/events-api/conventions"}]},{"group":"Examples","pages":[{"title":"1Password Events API generic scripts","sidebarTitle":"Generic scripts","href":"/events-api/generic-scripts"}]},{"group":"Reference","pages":[{"group":"API Reference","pages":[{"title":"1Password Events API reference","sidebarTitle":"Overview","href":"/events-api/reference"},{"title":"Introspect bearer token (v2)","deprecated":null,"version":null,"sidebarTitle":"Introspect (v2)","openapi":"/openapi/events_api.yaml get /api/v2/auth/introspect","href":"/events-api/reference/introspect"},{"title":"Retrieve audit events (v2)","deprecated":null,"version":null,"sidebarTitle":"Audit events (v2)","openapi":"/openapi/events_api.yaml post /api/v2/auditevents","href":"/events-api/reference/audit-events"},{"title":"Retrieve item usages (v2)","deprecated":null,"version":null,"sidebarTitle":"Item usages (v2)","openapi":"/openapi/events_api.yaml post /api/v2/itemusages","href":"/events-api/reference/items-usage"},{"title":"Retrieve sign-in attempts (v2)","deprecated":null,"version":null,"sidebarTitle":"Sign-in attempts (v2)","openapi":"/openapi/events_api.yaml post /api/v2/signinattempts","href":"/events-api/reference/sign-in-attempt"}]},{"title":"Audit events","sidebarTitle":"Audit events","href":"/events-api/audit-events"},{"title":"Item usage actions","sidebarTitle":"Item usage actions","href":"/events-api/item-usage-actions"},{"title":"1Password Events API changelog","sidebarTitle":"Changelog","href":"/events-api/changelog"}]},{"group":"Events API v3 beta","pages":[{"title":"1Password Events API v3 (beta)","sidebarTitle":"Overview","href":"/events-api/beta"},{"title":"Get started with the 1Password Events API (beta)","sidebarTitle":"Get started with the beta","href":"/events-api/beta/get-started"},{"title":"API conventions","sidebarTitle":"API conventions","href":"/events-api/beta/conventions"},{"title":"Manage your Events Reporting integrations","sidebarTitle":"Manage integrations","href":"/events-api/beta/manage-integrations"},{"title":"Audit events catalog","sidebarTitle":"Audit events catalog","href":"/events-api/beta/audit-events"},{"title":"Events API beta roadmap and changelog","sidebarTitle":"Beta roadmap \u0026 changelog","href":"/events-api/beta/roadmap"},{"group":"API reference","pages":[{"title":"1Password Events API beta reference","sidebarTitle":"Overview","description":"Complete reference documentation for the 1Password Events API v3 beta.","href":"/events-api/beta/reference"},{"title":"Retrieve audit events (v3 beta)","sidebarTitle":"Audit events (v3 beta)","openapi":"openapi/events_api_v3_beta.yaml GET /api/v3/auditevents","href":"/events-api/beta/reference/get-v3-auditevents"}]}]}]}]},{"item":"Users API","icon":"id-badge","pages":[{"title":"Users API","href":"/users-api"}]},{"item":"SaaS Manager API","icon":"chart-line","pages":[{"title":"SaaS Manager API","href":"/saas-manager-api"}]},{"item":"Partnership API","icon":"users","pages":[{"title":"Partnership API","href":"/partnership-api/reference"}]},{"item":"Accounts API","icon":"user-gear","pages":[{"title":"Accounts API","href":"/accounts-api"}]},{"item":"Web Development","icon":"code","pages":[{"title":"Web Development","href":"/web/add-1password-button-website"}]}]},{"tab":"Community","menu":[{"item":"Developer community","icon":"users","href":"/community"},{"item":"Events","icon":"calendar","href":"https://luma.com/1password"},{"item":"Newsletter","icon":"envelope","href":"https://1password.com/developer-newsletter"},{"item":"Slack","icon":"slack","href":"https://www.1password.dev/joinslack"},{"item":"1Password Academy","icon":"graduation-cap","href":"https://www.1password.academy/path/1password-developer-tools"}]},{"tab":"Agentic Autofill partner guide","hidden":true,"pages":[{"title":"Agentic Autofill partner guide","href":"/agentic-autofill/partners"}]}]},"basePath":"","title":"Retrieve audit events (v3 beta) - 1Password Developer","buildId":"dpl_8hoxaqFTU7hTr6A2fUraxAyjuiZo","deploymentId":"dpl_8hoxaqFTU7hTr6A2fUraxAyjuiZo","dynamics":["10e4515597","c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["BannerMarkdown-D7Q3g8OM.js","dist-BvrGG8gU.js","lib-DuNMoZ05.js","lib-B8HbPgcC.js","clsx-B35qUV0p.js","html-void-elements-mCSPHezU.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","OpenApiReferenceProvider-CDiBsYGW.js","utils-KF9rPlmF.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-C26urKTX.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-BdjmJAC1.js","snippetPresets-3IpDBjt3.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","conditional-requirements-CFM0id0Q.js","ApiExamples-D4x_2vvo.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-BIWdc5Pa.js","shallow-LQqfiMNd.js","getApiPlaygroundDisplay-DryzlOZG.js","CodeSnippet-tcJujU4r.js","CodeSnippets-BHp0nVLL.js","Page-1CZdsdAn.js","getPastedJson-DU-1ayUv.js","icon-CZK2hPr4.js","MethodPill-DOaqmTFC.js","DuplicateIcon-B5-nUxxl.js","createIcon-CDP_U77G.js","DynamicMarkdown-GHvayGOn.js","SectionHeading-BYvpkmUD.js","axios-vUo_bRtp.js","Markdown-uxhlayGT.js","AssistantPageLink-CAf0yVYe.js"]}